Secure payment card transactions

A computer-readable medium having stored thereon a server security application that is configured to be installed on a point-of-sale (POS) server that runs a POS server application and that communicates with a POS terminal over a network, the server security application comprising executable instructions that cause the POS server to at least:

• receive payment data from the POS terminal, the payment data comprising actual card data from a payment card;
• provide false card data to the POS terminal, the false card data comprising an invalid payment card number;
• receive a first authorization request from the POS terminal, the first authorization request comprising the false card data instead of the actual card data, the false card data configured to be processed as if it were the actual card data;
• and
• transmit a second authorization request, the second authorization request comprising at least the actual card data.

A method for securing payment card transactions at a point of sale (POS), the method comprising:

• receiving, at a POS server, payment data from a POS terminal, the payment data comprising actual payment data from a payment medium, the actual payment data being encrypted;
• returning false payment data to the POS terminal in response to receiving the actual payment data, the false payment data comprising an invalid payment card number;
• and
• receiving, at the POS server, a first authorization request from the POS terminal, the first authorization request comprising the false payment data instead of the actual payment data, the false payment data configured to be processed as if it were the actual payment data;
• wherein said receiving the payment data, said returning the false payment data, and said receiving the first authorization request are implemented by one or more processors of the POS server.

A method for securing payment card transactions at a payment gateway, the method comprising:

• by a payment gateway server comprising computer hardware:
• receiving, an authorization request from a point-of-sale (POS) server, the authorization request comprising combined payment data and false card data, the payment data comprising encrypted actual card data from a payment card, the false payment data comprising an invalid payment card number, the false payment data configured to be processed as if it were the payment data;
• extracting the payment data from the combined payment data and false payment data;
• transmitting an authorization request to an authorizing entity, the authorization request comprising the payment data;
• receiving a response to the authorization request from the authorizing entity;
• and
• transmitting the response and the false payment data to the POS server, wherein the false payment data uniquely identifies the payment card.